The Information Security team wants to bring to your immediate attention a phishing email that has been circulating, which appears to originate from a UoT email address. This email is designed to trick recipients into sharing sensitive personal information, including passwords and account details. Please read the information below carefully to protect yourself and our community.
The email described above is NOT legitimate and was NOT sent by York University. If you clicked on the link and sent an email to utgsu.duo@aol.com, please change your password immediately. If you have re-used the compromised password on any other accounts, please change the passwords for those accounts to something complex and unique to each account. Passport York passwords can be changed at https://mms.yorku.ca, logging in, clicking on “Passport YORK” on the left-hand menu and clicking the “Change My Password” button on the right.
Red Flags to Watch Out For:
- Suspicious sender email: The sender's email address is randomly generated and not associated with York University’s official IT services.
- Request for personal details: York University would NEVER ask for passwords, Duo/MFA passcodes, or other sensitive information via email.
What to Do:
- Do not respond to this email or provide any personal information.
- Do not click any links or open attachments that may be included.
- Report the email: If you received this phishing attempt, please report it using the Report Phishing button or forward it to phishing@yorku.ca